PT-2004-2053 · Citrix · Citrix Program Neighborhood Agent+1

Publicado 2004-04-26 · Atualizado 2008-09-05 · CVE-2004-1077

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Citrix Program Neighborhood Agent for Win32 versions 8.00.24737 and earlier Citrix MetaFrame Presentation Server client for WinCE versions prior to 8.33

Description: The issue allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.

Recommendations: For Citrix Program Neighborhood Agent for Win32 versions 8.00.24737 and earlier, update to a version later than 8.00.24737. For Citrix MetaFrame Presentation Server client for WinCE versions prior to 8.33, update to version 8.33 or later.

Correção

Identificadores relacionados

CVE-2004-1077

Produtos afetados

Citrix Metaframe Presentation Server

Citrix Program Neighborhood Agent

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-1077 · Nota de Segurança
• http://support.citrix.com/kb/entry.jspa?externalID=CTX105650 · Aviso do Fabricante
• http://secunia.com/advisories/15108 · Aviso do Fabricante
• http://idefense.com/application/poi/display?id=237&type=vulnerabilities · Aviso do Fabricante